How Many Rules Supported? How Many Objects Supported?

[PhoneBoy]

We now have sk178325 that details the various limits related to the maximum number of:

• Rules supported (per policy)
• Objects supported (includes Multi-Domain specifics)
• Objects per group
• Changes per Publish operation
• Interfaces per gateway (above and beyond the limits specified in sk31631)

Actual limits you experience will depend on a number of factors, as noted in the SK. 

[the_rock]

I recall even 15 years ago, number 10000 was always floating around : - )

Andy

[PhoneBoy]

That number may have been valid in R7x and earlier for the number of rules.
In practice, if you've got a policy of several thousand rules, it's going to be hard to manage regardless of potential performance issues that result from using a large number of objects/rules.

[the_rock]

Honestly, I cant think of any company on this planet that would even need 1000 rules, though I recall once seeing someone with 5000 + rules, probably 3000 of them disabled LOL

When I asked the guy the reason, he just told me they were scared to clean it up, JUST IN CASE...some people : - )

Andy

[S_E_]

hi,

there are companies who do have this request:

https://community.checkpoint.com/t5/Management/Maximum-number-of-rules-in-R80-40-and-above/m-p/13826...

But it is great that CheckPoint creates an official document with numbers/limitations. 

Regards